$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa File: 4c160dcf-ed33-3837-89e6-a5d92394601e.roa (raw, json) Hash identifier: llQlBEJVwVl75pskYTsSWvVXWNjkrF88U9OjKcX5HXo= Subject key identifier: 85:38:22:7F:35:E0:99:D7:26:34:6D:06:72:39:D1:5A:5A:D4:22:AA Certificate issuer: /CN=d2584a20-171d-406f-91e5-a70a19be13b8 Certificate serial: 010D0C9F4328584F49756DE5FA7190565A9D7800 Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18540 IP address blocks: 198.148.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:6d:e5:fa:71:90:56:5a:9d:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4c26368c-efbe-4c0a-8ae7-add1a1dff34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0e:ed:b1:62:83:23:1f:04:e4:ec:5f:9e:60: 08:2d:e4:16:c8:29:77:15:75:ef:ab:24:f9:03:3d: 77:f0:d1:22:08:d0:23:0b:1f:a5:a7:f4:c1:76:5e: 23:5f:c6:b0:9f:01:be:21:66:cf:5e:df:a9:e1:eb: 66:98:c3:67:bb:34:91:9c:4b:76:a3:af:d9:09:a5: 17:4d:e9:e8:9b:2f:43:20:0c:b7:0a:99:8c:38:b5: 8d:4c:18:63:9c:66:64:4c:74:d0:35:fe:b8:05:b7: 31:34:6c:1f:c7:16:e1:13:f0:ee:47:e1:47:32:41: dd:c2:f9:9b:c2:14:89:c8:f4:86:44:8c:8a:07:cf: 35:0f:21:72:76:84:b3:48:7b:78:e9:38:f9:a2:40: df:31:26:c1:5f:9c:8d:80:e6:64:42:4e:00:c9:5d: c8:0e:b9:5b:83:96:e5:63:59:3e:44:d6:29:c9:0c: 4e:83:f5:94:d1:f9:df:4e:a2:78:19:95:6f:bd:3d: c7:6b:04:18:8a:ba:2c:94:a1:cf:c1:ba:3c:80:f4: 1b:36:d5:91:2a:91:7f:c9:94:16:7f:8a:6e:cb:d6: 41:6e:fc:d0:2c:cf:cd:19:80:08:d2:48:74:09:7f: 6b:5b:48:ce:bd:47:42:91:86:0c:c3:e2:8d:7e:d7: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:38:22:7F:35:E0:99:D7:26:34:6D:06:72:39:D1:5A:5A:D4:22:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl X509v3 Authority Key Identifier: keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer sbgp-ipAddrBlock: critical IPv4: 198.148.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:25:7d:1c:43:c5:4c:e0:93:da:e0:67:35:f4:16:14:2e:81: b0:af:b0:71:69:46:00:9f:7f:af:eb:1e:9f:2d:5f:0b:1d:3b: ba:c7:04:a0:89:0d:ef:38:97:29:d5:4a:95:f2:d3:9f:35:26: 1f:84:f5:9b:80:76:f3:33:59:ba:09:cc:6e:6b:45:1e:57:0a: d1:bd:11:28:6b:78:7b:34:14:bf:e0:c4:df:10:ac:3d:c6:ea: 2a:ad:01:43:0c:0d:a4:bd:3d:7d:bc:26:39:f8:9d:73:d9:24: ef:57:a2:dc:58:df:3d:e7:eb:41:6d:2b:a9:88:38:25:b7:bb: 20:f8:cf:d9:e6:24:4a:ae:90:30:68:a9:07:ea:6f:1a:94:d2: af:4a:0a:f1:ba:47:11:c4:c0:2e:0e:19:60:45:99:d1:3e:d0: 57:cd:06:ef:75:9d:fb:45:71:c5:9f:a4:9a:b6:83:7b:05:bf: 6e:ca:ff:a1:86:1a:f7:32:45:d1:48:33:05:68:cd:7f:72:a4: bb:55:23:52:96:17:05:4b:fd:49:23:33:c4:e6:5c:ed:6e:f1: db:11:25:69:21:47:89:19:b5:47:7b:67:e9:0f:59:fb:de:a7: 73:bf:d1:82:b3:a2:21:7c:20:38:41:dd:76:28:d3:2e:e5:b1: e0:28:f9:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdW3l+nGQVlqdeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ODRhMjAtMTcxZC00MDZmLTkxZTUtYTcwYTE5YmUx M2I4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGMyNjM2OGMtZWZiZS00YzBhLThhZTctYWRkMWExZGZmMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg7tsWKDIx8E5OxfnmAILeQWyCl3FXXvqyT5 Az138NEiCNAjCx+lp/TBdl4jX8awnwG+IWbPXt+p4etmmMNnuzSRnEt2o6/ZCaUX Tenomy9DIAy3CpmMOLWNTBhjnGZkTHTQNf64BbcxNGwfxxbhE/DuR+FHMkHdwvmb whSJyPSGRIyKB881DyFydoSzSHt46Tj5okDfMSbBX5yNgOZkQk4AyV3IDrlbg5bl Y1k+RNYpyQxOg/WU0fnfTqJ4GZVvvT3HawQYiroslKHPwbo8gPQbNtWRKpF/yZQW f4puy9ZBbvzQLM/NGYAI0kh0CX9rW0jOvUdCkYYMw+KNftf7wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU4In814JnXJjRtBnI50Vpa1CKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjU4 NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBhMTliZTEzYjgvNGMxNjBkY2YtZWQzMy0z ODM3LTg5ZTYtYTVkOTIzOTQ2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDI1ODRhMjAtMTcxZC00MDZmLTkx ZTUtYTcwYTE5YmUxM2I4L2QyNTg0YTIwLTE3MWQtNDA2Zi05MWU1LWE3MGExOWJl MTNiOC5jcmwwHwYDVR0jBBgwFoAUVnouO6O1KdYcRt9fEH08wI/DEwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjU4NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBh MTliZTEzYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMclfRxDxUzgk9rgZzX0FhQugbCvsHFpRgCff6/rHp8tXwsdO7rHBKCJ De84lynVSpXy0581Jh+E9ZuAdvMzWboJzG5rRR5XCtG9EShreHs0FL/gxN8QrD3G 6iqtAUMMDaS9PX28Jjn4nXPZJO9XotxY3z3n60FtK6mIOCW3uyD4z9nmJEqukDBo qQfqbxqU0q9KCvG6RxHEwC4OGWBFmdE+0FfNBu91nftFccWfpJq2g3sFv27K/6GG GvcyRdFIMwVozX9ypLtVI1KWFwVL/UkjM8TmXO1u8dsRJWkhR4kZtUd7Z+kPWfve p3O/0YKzoiF8IDhB3XYo0y7lseAo+Qk= -----END CERTIFICATE-----Generated at Fri Sep 25 14:40:22 2026 by rpki-client